2 matches found
CVE-2025-22872 Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
6.5AI score0.00535EPSS
SaveExploits0References4
PT-2024-40488
Name of the Vulnerable Software and Affected Versions Zend Framework affected versions not specified Description The issue arises from the Zend Json Encoder not properly handling the solidus character / during encoding, which leads to incompatibilities with the JSON specification. This...
6.1CVSS5.8AI score
SaveExploits0References4
20